WHAT IS CLAIMED IS: 

1 . A method for communication of messages in a secure manner in a 
communication environment which is subject to compromise, the method comprising: 

([ providing an escrow agent, wherein said escrow agent generates a pair of keys 
comprising a public key and a private key; 6 1^ 

^ ( causing said escrow agent to communicate said public key to all parties within 
a communication system to be used to support secure communication; 

C , extracting at each party a common benchmark; TC\ UC^ ^-f^w. m 

JL, agreeing among each party on a starting interval key referenced to said ^ tA & *■ r^^rr^^^t \ 
common benchmark; 




^^causing each party to generate iteratively a next interval key independently of 




each other party but with reference to an interval index, wherein said interval key is 

encrypted by said public key; thereafter — ~ — " 

<p , initiating a secure communication between or among parties using reference to 
said interval index and without communicating or exchanging their respective interval keys; 



causing each party to a secure communication to encrypt a message to be 
secured using the common interval key independently computed based on said common 
interval index; and 



% causing said encrypted message to be communicated within said system such 

that said encrypted message can be decrypted using said common interval key. 

H "- 

1 2. The method according to claim 1 wherein said parties exchange their > 
< - ] 2 respective interval indexes and wherein the parties with the older interval indexes advance 

(5 ^ I their interval index and compute said interval key corresponding to the latest interval index. 

*^ ^^jT^*^ 2, The method according to claim 2 wherein each party destroys each 

2 prior interval key after a new interval key is generated so that an older interval key cannot be 

3 recovered. 

1 4. The method according to claim 1 wherein said interval index is not 

2 communicated to said escrow agent. 

1 5. The method according to claim 1 wherein said starting interval key is 

2 not communicated to said escrow agent. 
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AGENT GENERATES PUBLIC AND 
PRIVATE KEY PAIR FOR SYSTEM 



•A 



AGENT COMMUNICATES PUBLIC KEY 
TO ALL OTHER PARTIES IN SYSTEM 



EACH PARTY EXTRACTS A COMMON 
BENCHMARK SOURCE FROM A CENTRAL CLOCK 



EACH PARTY AGREES ON A STARTING INTERVAL KEY 
WITH REFERENCE TO THE COMMON BENCH MARK 



D 



EACH PARTY ITERATIVELY GENERATES THE NEXT 
INTERVAL KEY INDEPENDENTLY BY ENCRYPTING 
THE INTERVAL KEY WITH THE PUBLIC KEY 



THE CURRENT INTERVAL KEY IS THEN DESTROYED 



COMMUNICATION IS INITIATED BASED 
ON INTERVAL INDEX AGREEMENT 



PARTIES EXCHANGE OR BROADCAST THEIR 
RESPECTIVE CURRENT INTERVAL INDEXES 



ESTABLISH A COMMON INTERVAL KEY: THE PARTY 
WITH THE OLDEST INTERVAL INDEX COMPUTES THE 
SUCCESSIVE INTERVAL KEYS UNTIL ITS INTERVAL 
INDEX CONFORMS TO THE LATEST INTERVAL INDEX 



THE PARTIES, KNOWING THE COMMON INTERVAL 
KEY BETWEEN THEM ENCRYPTS THE NEXT LOWER 
LEVEL OF COMMUNICATION (I.E., THE MESSAGE TO BE 
SECURED) USING THE COMMON INTERVAL KEY 



COMMUNICATE ENCRYPTED MESSAGE 



K 




EACH PARTY UPDATES INTERVAL INDEX AND 
RECOMPUTES INTERVAL KEY USING PUBLIC KEY 



M 



FIG. 2 



